$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft File: 48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft (raw, json) Hash identifier: 1E3010hKkxSjp0PehZ4wjPiYUfqpmYlg6E6taMSsbhs= Subject key identifier: 9F:A9:C5:00:D8:41:98:76:EA:81:D7:FD:87:F8:79:99:69:DB:F0:AD Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8 Certificate issuer: /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8 Certificate serial: 17A0B102F42F2C99104A3A61723F5876D24AC8D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft Manifest number: 06 Signing time: Fri 29 May 2026 09:18:18 +0000 Manifest this update: Fri 29 May 2026 09:13:18 +0000 Manifest next update: Sat 30 May 2026 10:30:18 +0000 Files and hashes: 1: 3230322e3134392e3232342e302f31392d3139203d3e2039383131.roa (hash: YdyvCw5rtpN8s3W7Xua+RJam9jxVeVbC+VX9oKroJVs=) 2: 3232302e3130312e3230382e302f32332d3233203d3e2039383131.roa (hash: DtpAVIyTFIGGw4HKnliR5Uj5XjBf20DjQ0UhMtl9YI0=) 3: 3232302e3130312e3139322e302f31382d3138203d3e2039383131.roa (hash: pMBI9nhF22TYCuZ7x4zaXmcnpW/2H0ziI7+urmojo34=) 4: 48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl (hash: AAEh3itzGIep6IXzIDRYwV+tjA3Yz/bwpgI/8KcyNBU=) 5: 3232302e3130312e3139322e302f31392d3139203d3e2039383131.roa (hash: Ak5SeQQkYOzAnpuqdXEgLNIfXeknUYQv0XsXG/7dxjE=) 6: 3230322e3134392e3232342e302f32302d3230203d3e2039383131.roa (hash: FeU2oExS8wELGKDhe4bjPejSoUJukgJYC6DfsdrdElA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a0:b1:02:f4:2f:2c:99:10:4a:3a:61:72:3f:58:76:d2:4a:c8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8 Validity Not Before: May 29 09:13:18 2026 GMT Not After : May 30 10:30:18 2026 GMT Subject: CN=9FA9C500D8419876EA81D7FD87F8799969DBF0AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:10:a5:6b:f4:9a:fb:9e:a6:7e:59:20:e6: 11:70:05:70:e0:d5:9d:1d:a7:2b:96:dd:e4:32:4c: 66:7d:17:a5:8f:ae:77:9e:3a:66:b1:a0:a9:37:69: 81:55:d7:67:32:d1:30:cb:00:7b:dc:e1:b2:f7:57: 12:e7:cd:bb:1e:c6:f2:a2:98:0b:8c:bf:5c:cf:42: 12:4a:c2:ec:d0:98:df:82:ae:d4:a8:e9:5e:69:09: b3:37:57:56:65:d6:57:38:93:e3:fc:2c:cc:0b:fb: 8b:9a:d9:ce:f7:f5:7d:72:76:b4:df:57:e3:dd:82: e1:e2:53:be:db:79:e5:39:54:4a:c5:bb:b6:21:74: 65:a8:02:0c:3c:62:89:3e:91:b8:75:6e:e0:f5:ae: 48:4d:66:eb:60:c2:ca:15:0c:42:82:cd:97:9f:03: dd:71:f7:8b:02:90:5c:2a:ef:6d:e2:30:75:7e:3e: ef:40:15:55:5f:4d:e9:3f:de:32:17:f5:35:4f:06: f0:cd:56:d8:7b:86:7b:46:5c:3c:4a:5c:49:c9:36: 93:2d:15:3c:61:02:e4:e0:f9:ba:8b:d3:1d:72:78: 00:92:e5:dc:0a:42:4d:6b:81:9c:20:04:5b:48:d9: b2:ed:42:c0:60:0f:ea:83:54:a9:cc:a0:39:9d:08: 98:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A9:C5:00:D8:41:98:76:EA:81:D7:FD:87:F8:79:99:69:DB:F0:AD X509v3 Authority Key Identifier: keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:30:cc:4b:76:27:32:0e:40:46:cb:27:d3:98:dc:99:f8:71: 30:f0:71:c0:6d:89:28:e9:f1:56:24:b3:cc:d1:27:04:07:22: 00:8f:3b:93:5e:07:f6:98:e9:7d:53:c9:d2:47:d4:91:a3:e8: 60:60:c9:dd:ea:2a:f6:6f:ea:c8:1f:17:c3:41:a8:ce:08:45: e8:71:9d:df:47:a8:7f:15:cd:25:8f:66:b2:9e:fd:86:11:da: 7e:d7:da:ff:f2:59:73:6e:8c:2e:16:16:75:1a:32:9d:c6:b9: 5f:db:1b:74:da:fc:39:7f:3d:59:e7:fd:da:a7:dd:3b:b3:9a: 7e:65:da:75:c7:f8:e5:17:36:47:a7:4e:8d:c5:f7:85:87:60: dc:96:0e:88:49:7f:f4:ae:09:09:93:8c:95:bb:7a:e1:a3:cb: e4:87:7d:19:eb:9d:1a:37:6f:ca:63:d0:00:ea:65:79:83:32: d1:92:67:18:e5:db:7d:4c:4f:a1:84:10:0d:28:2c:99:3d:88: c1:6a:de:07:fe:09:c3:4c:1d:9b:54:ef:4a:77:f3:72:ef:b3: a5:6d:30:6b:77:89:67:1b:b9:cb:ef:0f:c2:a4:a2:eb:9f:8e: 50:ff:57:2c:35:d8:55:95:35:ef:c1:93:e0:7c:b0:63:7b:dc: ff:23:9e:1f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUF6CxAvQvLJkQSjphcj9YdtJKyNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2 Q0YxQzVBODAeFw0yNjA1MjkwOTEzMThaFw0yNjA1MzAxMDMwMThaMDMxMTAvBgNV BAMTKDlGQTlDNTAwRDg0MTk4NzZFQTgxRDdGRDg3Rjg3OTk5NjlEQkYwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClAhCla/Sa+56mflkg5hFwBXDg 1Z0dpyuW3eQyTGZ9F6WPrneeOmaxoKk3aYFV12cy0TDLAHvc4bL3VxLnzbsexvKi mAuMv1zPQhJKwuzQmN+CrtSo6V5pCbM3V1Zl1lc4k+P8LMwL+4ua2c739X1ydrTf V+PdguHiU77beeU5VErFu7YhdGWoAgw8Yok+kbh1buD1rkhNZutgwsoVDEKCzZef A91x94sCkFwq723iMHV+Pu9AFVVfTek/3jIX9TVPBvDNVth7hntGXDxKXEnJNpMt FTxhAuTg+bqL0x1yeACS5dwKQk1rgZwgBFtI2bLtQsBgD+qDVKnMoDmdCJhHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUn6nFANhBmHbqgdf9h/h5mWnb8K0wHwYDVR0j BBgwFoAUSNzBCn6SRE6AZVmZ58M8h2zxxagwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY2OTkwNDI4NjI1MzA3NS8wLzQ4RENDMTBBN0U5MjQ0NEU4MDY1NTk5OUU3QzMz Qzg3NkNGMUM1QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2Q0YxQzVBOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2Njk5MDQyODYyNTMwNzUvMC80OERDQzEwQTdFOTI0 NDRFODA2NTU5OTlFN0MzM0M4NzZDRjFDNUE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDDMS3YnMg5A Rssn05jcmfhxMPBxwG2JKOnxViSzzNEnBAciAI87k14H9pjpfVPJ0kfUkaPoYGDJ 3eoq9m/qyB8Xw0GozghF6HGd30eofxXNJY9msp79hhHaftfa//JZc26MLhYWdRoy nca5X9sbdNr8OX89Wef92qfdO7OafmXadcf45Rc2R6dOjcX3hYdg3JYOiEl/9K4J CZOMlbt64aPL5Id9GeudGjdvymPQAOpleYMy0ZJnGOXbfUxPoYQQDSgsmT2IwWre B/4Jw0wdm1TvSnfzcu+zpW0wa3eJZxu5y+8PwqSi65+OUP9XLDXYVZU178GT4Hyw Y3vc/yOeHw== -----END CERTIFICATE-----Generated at Fri May 29 22:03:34 2026 by rpki-client